Hello friends,

for some help I offer free room in Prague for visit (2 days only)....)

can someone help with passthrough of about 8 ports for an very usual webcamera. This camera is located in the local network and I need it at the IP 195.47.41.72 direct, without any ports, someting like a Virtual web server.

to access the server:
195.47.41.72
user barmani
password wifi

It is already something in the section firewall /NAT, but nothing is working.

Thanks for help

Fewo

not enought permisions.
192.168.1.251 - this is IP where camera is connected?
if Yes, please try:

Hello Valodja

I did what you said, extended it to 6550, because this is the last port i need for this camera, and it doesnt work.

I need only to get through all this ports from the router behind to this ip 195.47.41.72.

You can disable this new rule anytime so please try excatly what I gave.

Better change:
add chain=srcnat src-address=0.0.0.0/0 dst-address=0.0.0.0/0 action=masquerade comment="" disabled=no
to:
add chain=srcnat out-interface=WAN-LAN1 action=masquerade comment="" disabled=no
or better:
add chain=srcnat out-interface=WAN-LAN1 action=src-nat to-addresses=195.47.41.72 comment="" disabled=no
because the fist rule is acting on ALL interfaces.
then suppose that your camera service is on address 192.168.1.251 on ports xxxx-yyyy protocol TCP on Local-LAN2 interface:
add chain=dstnat in-interface=WAN-LAN1 dst-address=195.47.41.72 protocol=tcp dst-port=xxxx-yyyy action=dst-nat to-addresses=192.168.1.251 to-ports=xxxx-yyyy comment="apcko belidlo" disabled=no
if you want the camera services to be accessible from public (internet) side on public address 195.47.41.72:xxxx-yyyy
or:
add chain=dstnat in-interface=!Local-LAN2 dst-address=195.47.41.72 protocol=tcp dst-port=xxxx-yyyy action=dst-nat to-addresses=192.168.1.251 to-ports=xxxx-yyyy comment="apcko belidlo" disabled=no
if you want the camera to be accesible from WAN (internet) and also from the other LAN's.
you have to make the NAT rules very explicit by specifying the interface on wich the rules are to act otherwise you will find some unexpected results.
Remove all other rules.
Don't specify the source port (because is in general an ephemeral port).